Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_iplink.php?base_path' Remote File Inclu 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_ipaddr.php?base_path' Remote File Inclu 19 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_common.php?base_path' Remote File Inclu 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_class.php?base_path' Remote File Inclus 19 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_alerts.php?base_path' Remote File Inclu 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_common.php?base_path' Remote File Inclus 27 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_alert.php?base_path' Remote File Inclusi 20 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_ag_main.php?base_path' Remote File Inclusion 20 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/setup2.php?ado_inc_PHP' Remote File Inclus 21 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_common.inc.php?GLOBALS[user_ 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/base_conf_contents.php' Multiple Remote Fi 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_query.inc.php?base_path' Rem 28 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_criteria.inc.php?base_path' 21 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_output_query.inc.php?base_path' Re 18 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_output_html.inc.php?base_path' Rem 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_include.inc.php?base_path' Remote 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_db.inc.php?base_path' Remote File 24 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_cache.inc.php?base_path' Remote Fi 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_action.inc.php?base_path' Remote F 26 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - '/help/base_setup_help.php?base_path' Remote File 20 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_payload.php?base_path' Remote File Inclusion 17 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_maintenance.php?base_path' Remote File Inclu 20 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_main.php?base_path' Remote File Inclusion 18 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_logout.php?base_path' Remote File Inclusion 22 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_local_rules.php?base_path' Remote File Inclu 21 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_graph_main.php?base_path' Remote File Inclus 25 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_graph_form.php?base_path' Remote File Inclus 23 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_graph_display.php?base_path' Remote File Inc 18 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_graph_common.php?base_path' Remote File Incl 19 WEB indoushka
2012-02-11   Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_db_setup.php?base_path' Remote File Inclusio 18 WEB indoushka
2012-02-11   Nova CMS - '/includes/function/usertpl.php?conf[blockfile]' Remote File Inclusion 23 WEB indoushka
2012-02-11   Nova CMS - '/includes/function/gets.php?Filename' Remote File Inclusion 19 WEB indoushka
2012-02-11   Nova CMS - '/optimizer/index.php?fileType' Remote File Inclusion 21 WEB indoushka
2012-02-11   Nova CMS - '/administrator/modules/moduleslist.php?id' Remote File Inclusion 20 WEB indoushka
2012-02-13   Zimbra - 'view' Cross-Site Scripting 20 WEB sonyy
2012-02-12   eFront Community++ 3.6.10 - SQL Injection / Multiple HTML Injection Vulnerabilities 23 WEB Benjamin Kunz Mejri
2012-02-10   RabbitWiki - 'title' Cross-Site Scripting 21 WEB sonyy
2015-04-09   WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload 18 WEB Manish Tanwar
2000-12-19   BOA Web Server 0.94.8.2 - Arbitrary File Access 23 WEB llmora
2012-02-10   Zen Cart 1.3.9h - '/path_to_admin/product.php' Cross-Site Request Forgery 25 WEB DisK0nn3cT
2012-02-10   CubeCart 3.0.20 - 'switch.php?r' Arbitrary Site Redirect 20 WEB Aung Khant
2012-02-10   CubeCart 3.0.20 - '/admin/login.php?goto' Arbitrary Site Redirect 20 WEB Aung Khant
2012-02-10   CubeCart 3.0.20 - Multiple Script 'redir' Arbitrary Site Redirects 25 WEB Aung Khant
2012-02-10   LxCenter Kloxo 6.1.10 - Multiple HTML Injection Vulnerabilities 29 WEB anonymous
2012-02-10   Dolibarr ERP/CRM 3.x - '/adherents/fiche.php' SQL Injection 19 WEB Benjamin Kunz Mejri
2015-04-08   Novell ZENworks Configuration Management 11.3.1 - Remote Code Execution 20 WEB Pedro Ribeiro
2015-04-08   WordPress Plugin Traffic Analyzer 3.4.2 - Blind SQL Injection 21 WEB Dan King
2015-04-08   Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities 20 WEB LiquidWorm
2015-04-08   Balero CMS 0.7.2 - Multiple Blind SQL Injections 23 WEB LiquidWorm
2015-04-08   WordPress Plugin Shareaholic 7.6.0.3 - Cross-Site Scripting 23 WEB Kacper Szurek
2015-04-08   WordPress Plugin All In One WP Security & Firewall 3.9.0 - SQL Injection 25 WEB Claudio Viviani
2012-02-07   eFront 3.6.10 - 'administrator.php' Cross-Site Scripting 24 WEB Chokri B.A
2012-02-07   ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting 21 WEB LiquidWorm
2012-02-07   ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting 19 WEB LiquidWorm
2012-02-07   Simple Groupware 0.742 - 'export' Cross-Site Scripting 23 WEB Infoserve Security Team
2012-02-06   Vespa 0.8.6 - 'getid3.php' Local File Inclusion 20 WEB T0x!c
2012-02-03   PHP-Fusion 7.2.4 - 'weblink_id' SQL Injection 22 WEB Am!r
2012-02-03   project-open 3.4.x - 'account-closed.tcl' Cross-Site Scripting 22 WEB Michail Poultsakis
2012-02-02   Joomla! Component Currency Converter 1.0.0 - 'from' Cross-Site Scripting 24 WEB BHG Security Center
2012-02-02   iknSupport 'search' Module - Cross-Site Scripting 24 WEB Red Security TEAM
2012-02-02   Joomla! Component com_bnf - 'seccion_id' SQL Injection 15 WEB Daniel Godoy
2012-02-02   GForge 5.7.1 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB sonyy
2012-02-01   phpLDAPadmin 1.2.0.5-2 - 'server_id' Cross-Site Scripting 21 WEB andsarmiento
2012-02-01   phpLDAPadmin 1.2.2 - 'base' Cross-Site Scripting 24 WEB andsarmiento
2012-02-01   OpenEMR 4.1 - '/Interface/fax/fax_dispatch.php?File' 'exec()' Call Arbitrary Shell Command Execution 18 WEB High-Tech Bridge SA
2012-02-01   OpenEMR 4.1 - '/contrib/acog/print_form.php?formname' Traversal Local File Inclusion 20 WEB High-Tech Bridge SA
2012-02-01   OpenEMR 4.1 - '/Interface/patient_file/encounter/load_form.php?formname' Traversal Local File Inclus 20 WEB High-Tech Bridge SA
2012-02-01   OpenEMR 4.1 - '/Interface/patient_file/encounter/trend_form.php?formname' Traversal Local File Inclu 23 WEB High-Tech Bridge SA
2012-01-21   Lead Capture - 'login.php' Script Cross-Site Scripting 22 WEB HashoR
2012-01-28   Joomla! Component com_cmotour - 'id' SQL Injection 18 WEB the_cyber_nuxbie
2012-01-31   4Images 1.7.10 - '/admin/index.php?redirect' Arbitrary Site Redirect 22 WEB RandomStorm
2012-01-31   4Images 1.7.10 - '/admin/categories.php?cat_parent_id' Cross-Site Scripting 23 WEB RandomStorm
2012-01-31   4Images 1.7.10 - '/admin/categories.php?cat_parent_id' SQL Injection 19 WEB RandomStorm
2012-01-30   Joomla! Component com_bbs - Multiple SQL Injections 17 WEB the_cyber_nuxbie
2015-04-05   u-Auctions - Multiple Vulnerabilities 17 WEB *Don*
2015-04-05   WordPress Plugin Work The Flow File Upload 2.5.2 - Arbitrary File Upload 20 WEB Claudio Viviani
2012-01-30   Joomla! Component com_propertylab - 'id' SQL Injection 21 WEB the_cyber_nuxbie
2012-01-31   Joomla! Component com_crhotels - 'catid' SQL Injection 22 WEB the_cyber_nuxbie
2012-01-30   Joomla! Component com_firmy - 'Id' SQL Injection 21 WEB the_cyber_nuxbie
2012-01-28   Joomla! Component com_visa - Local File Inclusion / SQL Injection 26 WEB the_cyber_nuxbie
2012-01-26   xClick Cart 1.0.x - 'shopping_url' Cross-Site Scripting 21 WEB sonyy
2012-01-26   WordPress Plugin Slideshow Gallery 1.1.x - 'border' Cross-Site Scripting 17 WEB Bret Hawk
2012-01-26   Joomla! Component com_products - Multiple SQL Injections 20 WEB the_cyber_nuxbie
2012-01-26   Joomla! Component com_motor - 'cid' SQL Injection 21 WEB the_cyber_nuxbie
2012-01-25   vBadvanced CMPS 3.2.2 - 'vba_cmps_include_bottom.php' Remote File Inclusion 20 WEB PacketiK
2012-01-25   DClassifieds 0.1 final - Cross-Site Request Forgery 18 WEB High-Tech Bridge SA
2012-01-25   OSClass 2.3.3 - 'index.php?getParam()' Multiple Cross-Site Scripting Vulnerabilities 20 WEB High-Tech Bridge SA
2012-01-25   OSClass 2.3.3 - 'index.php?sCategory' SQL Injection 23 WEB High-Tech Bridge SA
2012-01-24   Joomla! Component JE Story Submit - 'index.php' Arbitrary File Upload 22 WEB Robert Cooper
2012-01-24   Ultimate Locator - 'radius' SQL Injection 19 WEB Robert Cooper
2012-01-24   glFusion 1.x - SQL Injection 20 WEB KedAns-Dz
2012-01-24   WordPress Plugin YouSayToo auto-publishing 1.0 - 'submit' Cross-Site Scripting 22 WEB H4ckCity Security Team
2015-04-02   Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal 17 WEB Anastasios Monachos
2015-04-02   WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 - Arbitrary File Upload 16 WEB Larry W. Cashdollar
2015-04-02   WordPress Plugin VideoWhisper Video Presentation 3.31.17 - Arbitrary File Upload 22 WEB Larry W. Cashdollar
2015-04-02   phpSFP Schedule Facebook Posts 1.5.6 - SQL Injection 22 WEB @u0x
2015-04-02   WordPress Plugin Simple Ads Manager - Information Disclosure 20 WEB ITAS Team
2015-04-02   WordPress Plugin Simple Ads Manager 2.5.94 - Arbitrary File Upload 19 WEB ITAS Team
2015-04-02   WordPress Plugin Simple Ads Manager - Multiple SQL Injections 18 WEB ITAS Team
2015-04-02   WordPress Plugin WP Easy Slideshow 1.0.3 - Multiple Vulnerabilities 16 WEB Divya
2015-04-02   Multiple WordPress UpThemes Themes - Arbitrary File Upload 19 WEB Divya
2015-04-02   WordPress Plugin Video Gallery 2.8 - Multiple Cross-Site Request Forgery Vulnerabilities 19 WEB Divya
2015-04-02   Kemp Load Master 7.1.16 - Multiple Vulnerabilities 21 WEB Roberto Suggi Liverani
2015-04-02   Joomla! Component com_rand - SQL Injection 16 WEB Jagriti Sahu
2015-04-02   WordPress Plugin Business Intelligence - SQL Injection (Metasploit) 16 WEB Jagriti Sahu
2015-04-02   WordPress Plugin Business Intelligence - SQL Injection (Metasploit) 21 WEB Jagriti Sahu
2015-04-02   WordPress Plugin Business Intelligence - SQL Injection (Metasploit) 17 WEB Jagriti Sahu
2012-01-21   Raven 1.0 - 'connector.asp' Arbitrary File Upload 21 WEB HELLBOY
2012-01-21   Joomla! Component com_kp - 'Controller' Local File Inclusion 21 WEB the_cyber_nuxbie
2012-01-21   Joomla! Component com_bulkenquery - 'Controller' Local File Inclusion 22 WEB the_cyber_nuxbie
2012-01-21   Joomla! Component com_some - 'Controller' Local File Inclusion 23 WEB the_cyber_nuxbie
2012-01-21   Joomla! Component com_car - Multiple SQL Injections 18 WEB the_cyber_nuxbie
2012-01-21   Joomla! Component com_boss - 'Controller' Local File Inclusion 19 WEB the_cyber_nuxbie
2012-01-23   Joomla! Component com_xball - 'team_id' SQL Injection 15 WEB CoBRa_21
2012-01-21   Joomla! Component Vik Real Estate 1.0 - Multiple SQL Injections 18 WEB the_cyber_nuxbie
2012-01-21   Joomla! Component Full - 'id' SQL Injection 19 WEB the_cyber_nuxbie
2012-01-21   Tribiq CMS - 'index.php' SQL Injection 21 WEB Skote Vahshat
2012-01-23   Joomla! Component com_br - 'Controller' Local File Inclusion 17 WEB the_cyber_nuxbie
2012-01-21   Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities 23 WEB Avram Marius
2012-01-20   Syneto Unified Threat Management 1.3.3/1.4.2 - Multiple Cross-Site Scripting / HTML Injection Vulner 22 WEB Alexander Fuchs
2012-01-20   Snitz Forums 2000 - 'TOPIC_ID' SQL Injection 22 WEB snup
2012-01-19   Vastal EzineShop - 'view_mags.php' SQL Injection 19 WEB Lazmania61
2012-01-19   PostNuke pnAddressbook Module - 'id' SQL Injection 23 WEB Robert Cooper
2012-01-18   OneOrZero AIMS - 'index.php' Cross-Site Scripting 23 WEB High-Tech Bridge SA
2015-03-31   Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities 23 WEB Mahendra